Over 1 million tech questions and answers.

SSD hardware encryption, but no UEFI, TPM or HDD password?

Q: SSD hardware encryption, but no UEFI, TPM or HDD password?

Hi - I've just got a Samsung 850 Pro and will be installing Win 8.1 Pro on it.

I'd like to use the hardware encryption on the SSD drive but now I've looked into it I'm not sure if/how I can.
Motherboard is a few years old now (ASUS M4A785TD-V EVO), and I can't see a HDD in BIOS (just supervisor and user), and don't think it is UEFI compatible either, or TPM compatible!
Samsung suggested bitlocker but I assume the lack of UEFI means bitlocker is no good for me - or would it mean the encryption would be software (which I'm not keen on as it will affect performance)?
Basically, is there anyway I could get hardware encryption working with a fresh install of Win 8.1
Thanks.

RELEVANCY SCORE 200
Preferred Solution: SSD hardware encryption, but no UEFI, TPM or HDD password?

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: SSD hardware encryption, but no UEFI, TPM or HDD password?

you can protect the SSD by setting a password in bios.. What a PITA to use, Bitlocker is software driven in Pro editions.. Another PITA..

Read other 23 answers
RELEVANCY SCORE 70.4

In the latest (as of around the time of this post) P50 bios, the NVME firmware password is not compatible with Intel RST and raid. In order to configure RAID, it is necessary to remove the NVME firmware password, and therefore the hardware encryption.  This is not particularly secure. I would use BITLOCKER or LUKS on the OS to overcome this but would rather have the benefit of the hardware encryption on the NVME drives (2x Samsung SM960). What is the limitation between Intel RST and the NVME disk passwords, and, are Lenovo going to give us combined NVME password functionality and Intel RST in some future BIOS update? P.S.: If you are on an earlier BIOS version and try to enable RST, you may find you can no longer get back into the BIOS setup afterwards.  In that case, try removing the SSDs, then disable RST, reinstall the SSDs, access BIOS setup, then remove the SSD passwords, and then try enable RST again.  Probably best to move to latest available BIOS for RST support.   

Read other answers
RELEVANCY SCORE 52.8

What do i have to do, exactly, to encrypt the hard drive on my thinkpad?It has a 250gb ssd, with opal 2.0 security.How I understand it, is that everything on the hard drive is already encrypted, and I just need to enable a password in the bios options to make it secure. However, there are several different options for enabling a password in the bios that all seem like they could be what I want. They are as follows (in the 'Security' --> 'Password' options):Supervisor PasswordPower-On PasswordHard Disk1 PasswordWhich one do I need to enable?Thank you for any help.

Read other answers
RELEVANCY SCORE 52.8

I just read about a security suite for USB called Carry it easy + Plus and one of its features is "Hardware based data protection by partitioning." Does anyone know what the difference between Hardware based encryption and regular encryption is ?
 

Read other answers
RELEVANCY SCORE 52.8

I've got a new Samsung 970 Pro SSD & will be replacing the original disk & upgrading from Win7 to Win10 over Christmas downtime, but I'm confused about harware encryption & have read alot of contradictory information.My understanding is that Hardware encryption needs to be enabled in BIOS or via Samsung Magic doctor & that Bitlocker then also need to be set to enable hardware encryption.That's all fine, but I'm seeing many articles suggesting that while the SSD & OS support hardware encryption, the BIOS or MB may not.Does anyone know for sure if the P70 / 970 Pro combination supports hardware encryption?Thanks.

Read other answers
RELEVANCY SCORE 52.8

Hi, I came accross this this post - Re: T480 Drive Encryption and posted a reply but no reply received. So, I want to know the following: 1. How does the HDD Hardware Encryption works on a Lenovo T480, what I discovered it works a bit different, boot into the BIOS and enable the HDD Password, enter a password and that's it correct? Note * This is on a Intel SSDPEKKF512G8L SSD.2. What I normally used is OPAL Encryption on the Samsung EVO 8xx range but I'm not able to do this on the T480 with the Intel SSD? Did anybody else experienced this before and if so, please give me some feedback. Thanks.

Read other answers
RELEVANCY SCORE 52.8

I am just setting up a new X1 Yoga 3rd gen with the included 1TB drive (Samsung MZVLB1T0HALR). As I understand, since it is OPAL 2.0, it should be self-encrypting. I was under the impression modern Bitlocker can make use of self-encrypting drives for hardware encryption rather than using software encryption. After setting up Windows, Bitlocker automatically started encrypting the drive. The fact that this took time led me to try "manage-bde -status C:" in an elevated CMD and I found that it was using software encryption. How do I go about getting Bitlocker to use the hardware encryption capabilities? For now, I disabled Bitlocker and then enabled Disk Password in the BIOS. I do get asked for the password at boot-up but how do I know the drive is actually encrypted and this isn't just an access password? In other words, if the SSD is pulled out and placed in another system, it should still be encrypted. According to https://support.lenovo.com/us/en/solutions/migr-69621 I should see a Disk Encryption HDD setting in BIOS if my drive supports encryption --- but I don't see this setting. As an aside, I tried to also download the Samsung Magician utility, but as you would expect, it says my drive is not supported (likely due to Microsoft drivers and/or that this is an OEM drive). 

Read other answers
RELEVANCY SCORE 52

Has anyone tried to enable hardware based encryption on the P50s with Bitlocker and the SSD? If so, how did it go? I know that on some systems you need just the right combination of BIOS settings and drivers, so I wanted to check and see if anyone had done it and tips you had.

Read other answers
RELEVANCY SCORE 52

Hi, There's something wrong with the m2 ssd (PM951) used by Dell's XPS 15 9550. I've tried everything I know to get hardware encryption working without success. One would think that such old and basic feature for SSDs would be functional on this high-end laptop... Has anyone succeeded in using hardware encryption with the PM951? I'd also be very interested to know, from people that replaced this ssd, if they can now use hardware encryption (with samsung 950 pro or 850 evo for example). What's not working so far : 1. There is no option to set HDD Password in the bios. This password is supposed to encrypt the ssd encryption key. In theory all SSD are encrypting data by default. All you need to do is set the hdd password to take advantage of it. 2. The "Wipe Data" feature in the bios. This is supposed to send a Secure Erase command to the ssd controller. This only changes the encryption key and renders all previously encrypted data unreadable. Unfortunately this has no effects on the pm951. The encryption key is left unchanged as I can still boot my Windows install. 3. On Linux with hdparm, I failed changing the encryption key and can't communicate with the pm951 controller at all. 4. On Windows 10 Pro, Bitlocker hardware encryption is not available. If you are prompted with this : http://img15.hostingpics.net/pics/113234bitlocker.png, it means that Bitlocker will be using software encryption.
 

Read other answers
RELEVANCY SCORE 52

I recently got a ThinkPad P51 and upgraded it with my own Crucial MX500 1TB SSD. I can't seem to get Bitlocker to manage the drive's hardware encryption, though. I verified secure boot is enabled and CSM is disabled in the BIOS. I also checked the drive supports hardware encryption (it does), but Bitlocker wants to encrypt the drive using software encryption. Does anyone have any ideas on what the issue may be?

Read other answers
RELEVANCY SCORE 52

I have the 1TB NVMe SSD (Samsung PM951) and can't get hardware Bitlocker encryption working. Can someone confirm whether the PM951 supports eDrive/TCG Opal? If not, will a firmware update enable support in the future?
I have the TPM and UEFI enabled, but when I try to set up Bitlocker, I do not get the hardware encryption option. Seems like the PM951 should support this like Samsung's retail drives. I can't even use the Samsung disk utilities to investigate because those are only for retail drives.

A:XPS 15 9550 SSD Hardware Encryption / Bitlocker

I'm also interested in this issue for my XPS twin Precision 5510. Please let me know if you find something out!

Read other 3 answers
RELEVANCY SCORE 52

Waiting to receive my X1E shortly. In the meantime, will be using Bitlocker encryption on both OS and 2nd NVME drives. Wanting to know how easy it is to configure hardware encryption on these NVME drives including native integration with Bitlocker so login into Windows unlocks Bitlocker drives (not separate 3rd party unlock mechanism). I remember looking at this top a while ago and realised it wasn't easily achievable. I also wonder with the top spec i7 processor spec'd on my laptop if there's any real practical different between hardware and software encryption performance wise.

Read other answers
RELEVANCY SCORE 51.6

HP PC hardware diagnostic UEFI screen appears during boot. And shows the bios version.. Why this screen is appeard?? I already updated to my bios.

Read other answers
RELEVANCY SCORE 51.6

I installed the update. All went well, it created a partion like it said with tools. Instructions said to boot using F2. Will not do anything with F2. In fact F8 does nothing either. All I have when booting  are ESC,F10 and F12. How do I start the tools? I can get to F8 optons after booting to LAN and after fail gives me advanced options for F8. Nothing for F2. Where is that? Have I lost boot options?Thanks for any help.

Read other answers
RELEVANCY SCORE 51.6

Started getting bsod: last 2  screens: Driver_IRQL_not_less_or_equal and special_pool_detected memory corruption.Did factory reset, stopped in the middle of procedure and blue screen cameuptried Hp recovery manager, made it thru reformatting the windows partition on hard drivecopied files and stopped at about 34% of reinstalling original software. The diagnostics sent me hereit has: version 1.6.0.0-biosmemory testhard drive check Need help in taking the next step I can access start up menu by power and then esc button and can use the F1-F12 I was in process of learning to zip mini dump files to show on the community HP board.  Now laptop will not load, except preparing automatic repair,  and get thru  awhile til blue screen shuts it down i have NO files to worry about and would just like a fresh start.  The laptop had lots of memory as it was not used, til 2017 even though it was new in 2015   

Read other answers
RELEVANCY SCORE 51.6

Product Name: HP Pavilion 14-n014nrOperating System: Microsoft Windows 10 (64-bit) Hi I ran HP PC Hardware Diagnostics UEFI. Details [Hard Drive 1]: Smart Check: PassedLong DST: Failed Failure ID: GLQATH-6TA89D-MFPWXF-60U003Product ID: E8A76UA#ABA Please could someone tell me what the failure is and provide a solution? Thank you.

Read other answers
RELEVANCY SCORE 51.6

Hi, I am a little confused. I have a Envy 700-327C with Windows 7. After updated BIOS, the system doesn't boot anymore. I found similar issue on this form ( http://h30434.www3.hp.com/t5/Notebook-Operating-System-and-Recovery/ENVY-17-j005tx-BIOS-CORRUPTION-U...) I know this is a notebook and mine is desktop. After I downloaded and installed the software on USB drive, I am not sure what I need to do. After I inserted the USB and boot the system, still black screen. Do I need to something when I boot the system? Thanks in advance  

Read other answers
RELEVANCY SCORE 51.6

I shut down my computer and then turned it back on and this HP PC Hardware Diagnostics UEFI screen came up. I pressed F2 and did the memory and hard drive test but after that, there's no options to close out. I'm really confused and I just want to get to my normal windows stuff. What should I do?
 

Read other answers
RELEVANCY SCORE 51.6

Bonjour,J'ai malencontreusement fait tomber mon PC ( chute de 40cm ). Depuis, il m'affiche " Boot Device Not Found " et " Please install an operating system on your hard disk".Après avoir effectué un diagnostique du " Hard Drive Check ", il m'affiche " No hard drive installed. Please check that the power and data cables are connected properly".Que dois-je faire ?

A:HP Hardware Diagnostics UEFI

If the laptop was on when it dropped, then it probably damaged the hard drive and it needs replaced.  If it was not on, it is possible that it became disconnected, but not likely.  HERE IS THE MANUAL for that model line.  It shows how to remove that hard drive on page 50.

Read other 2 answers
RELEVANCY SCORE 51.6

I get this messageVersion 1.6.0.0Boot device not foundPlease install an operation system on your hard disk.Hard disk (3F0)F2 system diagnostics

A:Hp pc hardware diagnostics uefi

That error could point to several things.1-Your OS is corrupted and you need to reinstall.2-Your hard drive has failed/is failing and will have to be replaced.3-Your hard drive has lost secure connection. Remove the service panel on bottom and unplug/ replug hard drive. Have you tried running diagnostics on drive by tapping F2?

Read other 1 answers
RELEVANCY SCORE 51.6

My hp all in one 22-3020 screen opens upto a blue choose an option menu, I've tried restoring, recovering,however everything fails. I then preformed a quick hard drive test, smart check says passed but the short dst failed... What are my options & what should I do next ?

A:HP hardware UEFI test

My failure Id code is : PGEK3D-7Q08H3-PXPAMG-60QR03My computer is a year old and I'm out of warranty

Read other 1 answers
RELEVANCY SCORE 51.6

I did a HP PC hardware diagnostics test on hard drive check, using quick check and the result I got was SMART Check : NOT INSTALLEDShort DST : NOT INSTALLEDCan anyone help me how to get this problem solved?Really need a help..Thank you..

Read other answers
RELEVANCY SCORE 51.6

Bitlocker hardware encryption with edrive won't enable to a myimage.wim image.

It goes directly to software encryption.

It worked once using Macrium reflect, but never again.

I used the MS recommended way to apply it to an image and that reverts to software encryption too!

I am using an Intel Pro 2500 series SSD drive. Hardware encryption works on a fresh DVD install test.


I then do the following:

1. I clear the TPM in BitLocker, in BIOS too, and turn-off BitLocker,

2. Boot using a PE drive and DISKPART the drive with the clean command

3. Use the Intel SSD tools to remove OPAL activation with a -psid_revert

(I have tried reversing steps 2 and 3 too)

4. Do a fresh 8.1 PRO install

5. With no updating or anything I use sysprep to OOBE and generalize with a shutdown

6. Boot to the PE drive and use dism to apply the Capture-Image script

7. Use DISKPART to clean the drive

(have even used a brand new drive too)

8. Use CreatePartitions-UEFI.txt script to create the partitions

9. Use ApplyImage.bat script to apply the .wim image

10. Start the OS

11.Turn BitLocker on and it reverts right to software encryption

WHAT AM I DOING WRONG? AM I DOING ANYTHING WRONG?

Here is how to do it right out of the TechNet article "Encrypted Hardrive" https://technet.microsoft.com/en-us/library/hh831627.aspx

Disk Duplication: This deployment method involves use of a previously configured Windows 8 or Windows Server 2012. image and... Read more

Read other answers
RELEVANCY SCORE 51.6

Hello, I have a Lenovo X1 Carbon 4th gen Type 20FB, 20FC. It has a LITEON L8H-256V2G for an SSD. I've tried to get Bitlocker to hardware encrypt to no avail. I want to find out if this particular SSD is capable of hardware encryption (edrive). I've searched on the Lenovo's support site, these forums and searched on Google without finding an answer.  These are the procedures I followed to try and enable hardware encryption:- I enabled CSM in order to boot from a USB optical drive with UEFI only enabled.- I booted with a Win 10 Enterprise disk to get to a command prompt and ran the DISKPART clean command in order to put the drive in an unitialized state.- I restarted the laptop and performed a clean install of Win 10 Enterprise- After windows installation, I went back into the BIOS and enabled secure boot which also disables CSM.- After logging back into Windows, I ran the manage-bde command to try and force hardware encryption (mange-bde -on C: -fet Hardware) but I get an error stating that "the drive specified does not support hardware-based encryption."  I know someone will respond with this:For Encrypted Hard Drives used as startup drives:? The drive must be in an uninitialized state.? The drive must be in a security inactive state.? The computer must be UEFI 2.3.1 based and have the EFI_STORAGE_SECURITY_COMMAND_PROTOCOL defined. (This protocol is used to allow programs running in the EFI boot services environment to send securi... Read more

Read other answers
RELEVANCY SCORE 51.6

Putting cost aside, which would offer a more secure flash drive? Which one would have higher "vulnerabilities" ?

E.g. of Hardware Type:
http://www.kingston.com/en/usb/encrypted_security/dtvp30

E.g. of Software Type:
http://www.newsoftwares.net/usb-secure/
 

A:Flash Drive Encryption: Hardware vs Software?

Hardware based encryption is stronger as it is built into the USB and is always enabled. Software based encryption however is more susceptible to brute-force attacks, if the attacker is able to locate the counter and reset it as well as parallel attacks where the encrypted files are copied onto another PC to resume the cracking process.
 

Read other 0 answers
RELEVANCY SCORE 51.6

Hi folks, I've been trying hard to get my Crucial m500 SSD hard drive to work in edrive (hardware encryption) mode with the w520. I've read several other threads related to the process for different Lenovo machines, but I haven't seen much discussion on the topic for the W series laptops as of yet. Here's what I've tried so far: Clean install of Windows 8.1, while running the latest bios 1.42.All updates from Windows Update toolAll updates from Lenovo System Update EXCEPT the "Intel Rapid Storage AHCI Driver". This seems to be a major point in other threads since apparently the Intel driver is incompatible. I confirm that I'm running Microsoft's "Standard SATA AHCI Controller".Enable drive bitlocker encryption.Link to image When I enable bitlocker encryption, I'm given the choice to either do the existing data only or the whole drive. According to Crucial tech support, that's a telltale sign that edrive is not being used. As further confirmation, I've also run checked edrive status using this method: Start Command Prompt as Administratormanage-bde -statusCheck "Encryption Method" line. It will read "Hardware Encryption" if edrive is in use. Mine says "AES 128"  Moderator comment: Image(s) converted to link(s). For helpful information, please see: About Posting Pictures In The Forums. 











Solved!
Go to Solution.

A:bitlocker edrive hardware encryption on w520 with ...

W520 BIOS doesn't support eDrive.  I highlighted in red the reason why, from the below URL.  At the time W520 was developed this protocol (and UEFI 2.3.1) didn't exist yet.  We don't have any plan to retrofit the older systems to add this support now.
 
http://technet.microsoft.com/en-us/library/hh831627.aspx
 
For Encrypted Hard Drives used as startup drives:

The drive must be in an uninitialized state.
The drive must be in a security inactive state.
The computer must be UEFI 2.3.1 based and have the EFI_STORAGE_SECURITY_COMMAND_PROTOCOL defined. (This protocol is used to allow programs running in the EFI boot services environment to send security protocol commands to the drive).
The computer must have the Compatibility Support Module (CSM) disabled in UEFI.
The computer must always boot natively from UEFI.

Read other 5 answers
RELEVANCY SCORE 51.6

Hi,
I need a 2.5 inch internal Hard Disk Drive with Hardware Encryption (preferebly AES-256). Any suggestion?

FYI, I have found Western Digital My passport Essential series with Hardware Encryption. But That is external only.

Thanks in advance.
 

Read other answers
RELEVANCY SCORE 50.8

Latpot stopped booting Win7 and when I launch UEFI Diagnostic it shows next: SMART Check: PASSEDLong DST: FAILED FAILURE ID: 9U0702-7HM83Q-QFPJXG-61D903PRODUCT ID: H0V46ES#ACB What's this failure and do I have to change my HDD?

A:HP PC Hardware Diagnostics UEFI failure

Hi,          The Failure ID refers to Hard Disk 1 Full Test Failure. You have to replace the HDD to get the unit working.

Read other 2 answers
RELEVANCY SCORE 50.8

Computer description: HP G60 Notebook, upgraded to Windows 10 Recently started having problem with no sound.  I downloaded the latest version of HP PC Hardware Diagnostics UEFI to a separate partition on my hard drive, but I can't figure out how to get to it.  Pressing F2 just gets me memory and hard disk testing.  Similar to midev7's post on 10-14-2016.

Read other answers
RELEVANCY SCORE 50.8

I have a new M710S (SFF ThinkCentre) which came with a 256gb PCIe Samsung M2 SSD.  I have enabled BitLocker hardware encryption on many other computers using ATA-based Samsung SSDs (like EVO 850s) by loading Windows10 Enterprise, and setting the BIOS to enable OS control of the TPM chip. I cannot get Win10 Enterprise on this new M710S to work with hardware encryption.  Whenever I go to turn on BitLocker, it prepares for software encryption.  I was assured by Lenovo Sales that since the PCIe M2 is TPM 2.0 OPAL TCG certified, BitLocker hardware encryption would work. Other Samsung SSDs require Samsung Magician to set them up for BitLocker hardware encryption-- Samsung Magician does not recognize the Samsung M2 PCIe memory that Lenovo is using. Does Lenovo provide the tools necessary to set up BitLocker hardware encryption on the M2 drives they are providing?Has anyone done hardware encrytpion successfully on these new M2 PCIe drives? BIOS= M16KT49A Thanks in advance.

A:Bitlocker eDrive (hardware encryption) on an M710S with PCIe M2

Bitlocker is software encryption.  Some drives support hardware encryption, but it isn't bitlocker.  What model drive do you have?

Read other 2 answers
RELEVANCY SCORE 50.4

HP PC Hardware Diagnostics UEFI - System Extensive Test
Failure ID: 6FH3UT-5AF85H-XD002K-60W103
Product ID: LG266PA#ABG
The Hard drive gave the failure error - it is type ATA, model ST9500325AS Serial No [personal information removed] 
WHAT needs to happen?
 
Also Battery check: Primary - Calibration required (21) - how do I calibrate?
 
And I don't understand why they provide HP PC Hardware Diagnostics UEFI - if their info page for it does not exist.











Solved!
View Solution.

A:P PC Hardware Diagnostics UEFI - test failure

The hard drive has failed and will need to be replaced. If you are still in warranty HP will send a replacement. If not a retail laptop SATA hard drive can be used. Just be sure to get one of at least equal capacity as the original in order to use Recovery Media to install Windows/drivers/software on the new hdd. It can be larger, but not smaller capacity.For instance if you have a 500GB hdd you could use a 750GB hdd but not a 320GB hdd. Battery calibration:http://support.hp.com/us-en/product/HP-Pavilion-dv6-3200-Entertainment-Notebook-PC-series/4308480/model/5051632/document/c00821536#AbT3

Read other 2 answers
RELEVANCY SCORE 50.4

5 times the HP Support Assistant has tried to update the "HP PC Hardware Diagnostics UEFI". Each time it fails. After each attempt I did a shutdown and then tried again.










Solved!
View Solution.

A:HP PC Hardware Diagnostics UEFI install failes

After two attempts of installing from the HP software web page I got it to install correctly. Then I had the HP Support Assistant do another scan and all is good.

Read other 4 answers
RELEVANCY SCORE 50.4

originally had probs with win update, wouldnt update, had msn remotely try to fix several times, not fixed..tried to system recovery, didnt change reverted...came to hp,  d/l the hp hardware diagnostic UEFI, ran system quick check, b4 completed, comp shuts off...i have no idea of course whats wrong with it,  hoping the mfg website here may have a solution

Read other answers
RELEVANCY SCORE 50.4

Help, While attempting to run a battery test on my son's HP Eny 15 notebook PC,  I mis-clicked and selected a language other that English ( it looks to be Arabic - but that is beside the point) :^( .    I am not able to find out how to set the language to English or reset it so ithat I may choose again.  Any help appreciated,Thank you,RP

Read other answers
RELEVANCY SCORE 50.4

What is the current situation with using hardware Bitlocker + NVMe boot drive on Lenovo Thinkpads (X390)? I?ve tested with 2 different drives: the OEM Intel 7600p which was shipped with notebook and separately purchased Samsung 970 EVO plus and no luck so far. Prerequisites:1) BIOS is set to UEFI only2) CSM is disabled3) SSD-s are running latest firmware4) BIOS is running latest firmware With 7600p I took the following steps:1) Booted to Windows from separate USB drive.2) Used Intel® SSD Pro Administrator Tool to enable eDrive on Intel 7600p.3) Performed secure erase using the same tool. 4) Installed Windows 10 pro (downloaded from microsoft.com, not the Lenovo Recovery media)5) Tried to enable Bitlocker but was prompted with Choose how much of your drive to encrypt, which means that HW encryption isn?t activated. With 970 Evo Plus I took the following steps:1) Installed Windows on the same drive and booted into it.2) Used Samsung Magician to enable eDrive.3) Booted to Samsung Secure Erase USB drive and performed secure erase. 4) Installed Windows 10 pro (downloaded from microsoft.com, not the Lenovo Recovery media)5) Tried to enable Bitlocker but was prompted with Choose how much of your drive to encrypt, which means that HW encryption isn?t activated. Noticeable is that after enabling eDrive, the ?HDD1 Password? menu item was gone from BIOS. This supposedly should mean that at least BIOS assumes that eDrive is enabled. Is H... Read more

Read other answers
RELEVANCY SCORE 50.4

Hey,

I'm having an issue with enabling hardware encryption with Bitlocker using Windows 10 build 10586 on a clean install with a Samsung 850 SSD.

The encryption worked flawlessly before.

I've spent hours and attempted multiple solutions and made several tests.

On the same machine, if clean installing build 10240 (RTM, before November update) right now, the encryption works.

I have UEFI on with Legacy/CSM off, Fast Boot on, Secure Boot on, and a clean GPT installation after using the 'diskpart clean' command.

As always, it's required to change a group policy to allow additional authentication at startup. I did that as always.

On a clean installation of build 10586, the wizard will say 'parameter is incorrect' when you attempt to start encryption.

Microsoft did announce some Bitlocker-related changes for build 10586: https://technet.microsoft.com/en-us/library/mt403325

There are also new group policies added. I've tried all combinations. They now allow you to try and force a specific encryption cipher. Samsung uses XES-AES256. I tried forcing that (as well as all other combinations) but the same error returns.

Now, here's where it gets interesting, and possibly why no reports about this have surfaced yet:
If you enable the encryption on build 10240, and then upgrade to 10586, the encryption will remain and will work properly on build 10586.

If you then attempt to 'Reset this PC', and choose the 'keep nothing' option, it will warn you that bitlocker will be disabled. ... Read more

A:Bitlocker hardware encryption cannot be activated on Win10 10586/1511

I am having this exact same issue on build 10586. Very frustrating. I have not tried the 10240 build however. Any suggestion on where I can get that build?

Read other 9 answers
RELEVANCY SCORE 50

Hi there,Recently my laptop had been freezing immediately after entering windows explorer. After a reset it now very frequently freezes at seemingly random points.I did a test of the hard drive in the hardware diagnostics UEFI which failed. Failure ID was given as:PTXX24-7PQ8KU-XD7WMG-60XV03Thanks for any advice. My product is no longer in warranty.

Read other answers
RELEVANCY SCORE 50

Hey,  Not sure if this is the right board to post it but i encountered an issue with a laptop yesterday. The initial issue was a high pitch noise coming from the laptop when it was turned off and that the Ethernet connector had the LED glowing even in that state. I have looked for the document on HP site about  notebooks making a high pitchnoise when the CPU goes to a sleep state but the thing is that in BIOS i have found no such thing for the CPU configuration, probably because this is has an AMD chipset; Performed component tests in UEFI for:-Power source: Passed;-Battery: Passed;-AC Adapter: Passed;-Processor: Passed;-System Board: Passed; I have performed a cold reset as well by removing the battery and the charger.The BIOS is up to date (F.10 Rev.A); I have performed a system recovery and thats when the issue disappeared;So HPSA started updating the software again and boom, the issue re-appeared. With Ccleaner i have uninstalled all AMD drivers and when i tried to get back to UEFI Hardware diagnostics, instead of having the GUI with all the options, i had the simple layout with only "Memory test" and "Hard Drive test".  I have tried installing UEFI from the HP web site and it did, the second time it said i have the latest version already but i still don't have the GUI UEFI but rather the simple one. My question is, how can AMD install manager affect the UEFI hardware diagnostics after i uninstall all AMD drivers and if th... Read more

Read other answers
RELEVANCY SCORE 50

How can I fix this issue.... is the driver really bad? 

A:I did a hardware diagnostic UEFI test, driver failed. How c...

@LM0904 HDD is like a light bulb, it can die anytime specially when dealing with heat specially when playing games or doing high graphics works. Did the test produce a 24-charactor code ? If yes then sadly to say: Most of the time the 24 char failure id indicates the HDD is failing and need to be replaced. Is it still under warranry ? If Yes, please call HP for a replacement.In the US:    http://www8.hp.com/us/en/contact-hp/phone-assist.html#section1or HP technical support: 800-474-6836. If you live outside the US/Canada Region please click the link below to get the support number for your region.  http://welcome.hp.com/country/w1/en/contact_us.html    Regards.

Read other 1 answers
RELEVANCY SCORE 50

Hi Everyone I bought an Unused Thinkpad X270 Windows 7   which has this SSD256GB SSD M.2 NVMe PCIe 2280 Toshiba Lenovo FRU 00UP641 THNSF5256GPUK  Which I understand is an OPAL 2 hardware encrypted drive ?? Im not too familiar with encryption but reading these forums I seem conclude the following 1. The SSD hardware encryption is always on but to encrypt it so no one else can access, need tosecure with hdd password.  I have set superviser and " Hard Disk 1 "  passwords and when I turn laptopon it prompts me for both of these. From my understanding the FDE encryption is now workingbut how do I know ? 2. Some topics in the forums give this linkhttps://support.lenovo.com/ar/en/solutions/ht002240 This link suggests that if system detects an opal compatable SSD it enables the Encryption Menu in the bios. 3. The issue I have is that no Encryption Menu has appeared in my BIOS.  The only options are in Securityand Hard Drive 1  password  - in relation to the hard drive 4. Is setting the Hard Drive 1 password adequate ?  or should an encryption menu appear. Thanks in advance for your assistance.

A:Thinkpad X270 conflicting info in forums to enable hardware ssd encryption

there is no encryption menu in the BIOS.  The data is always encrypted in the drive.  The computer writes normal data so there is no overhead or delay.  Without the password, the drive could be moved to a different computer and read.   The password eliminates the possibility of stealing the computer and reading the drive elsewhere.  One password is enough.

Read other 4 answers
RELEVANCY SCORE 50

Hi Everyone I bought an Unused Thinkpad X270 Windows 7   which has this SSD256GB SSD M.2 NVMe PCIe 2280 Toshiba Lenovo FRU 00UP641 THNSF5256GPUK  Which I understand is an OPAL 2 hardware encrypted drive ?? Im not too familiar with encryption but reading these forums I seem conclude the following 1. The SSD hardware encryption is always on but to encrypt it so no one else can access, need tosecure with hdd password.  I have set superviser and " Hard Disk 1 "  passwords and when I turn laptopon it prompts me for both of these. From my understanding the FDE encryption is now workingbut how do I know ? 2. Some topics in the forums give this linkhttps://support.lenovo.com/ar/en/solutions/ht002240 This link suggests that if system detects an opal compatable SSD it enables the Encryption Menu in the bios. 3. The issue I have is that no Encryption Menu has appeared in my BIOS.  The only options are in Securityand Hard Drive 1  password  - in relation to the hard drive 4. Is setting the Hard Drive 1 password adequate ?  or should an encryption menu appear. Thanks in advance for your assistance.

Read other answers
RELEVANCY SCORE 49.6

I am looking for a decent encryption program or a way to password protect a USB thumbdrive. I've never dealt with encryption before, so any guides or examples would be helpful.
 

A:USB Encryption/Password Protection

There are quite a number of excellent USB flash drives that are designed for this, but encryption software for generic USB flash drives is trouble in the few systems I have seen... and there are too many ways to get around the encryption. Your unknown invader might not be able to get to your files... or if good, he might. But he can easily get rid of what is on the drive and use it as his own.
 

Read other 6 answers
RELEVANCY SCORE 49.2

Hey Folks,  I was reading an interesting article on the following Microsoft Issues Security Advisory on Solid-State Drive Hardware Encryption, and I was wondering what Lenovo had planned to help out?  https://www.ru.nl/icis/news/recent_news/@1181122/radboud-university-researchers-discover-security/ 

Read other answers
RELEVANCY SCORE 49.2

Good evening everyone and Happy Holidays to you as well! Over the past few days, I've spent a significant amount of time looking at some of these password encryption programs (both FREE & the paid variety, as well as, the reviews I've been able to locate). My purpose has been to try and determine if they are of any real value as far as security enhancement (related to passwords), or whether another method I have been utilizing for a short period of time is just as good...or perhaps better.I've even tried out one password-protection program called KeePass. I spent two days just reading the written data available about it, as well as, repeatedly watching/re-watching several videos about the KeePass software. For a program that the reviews claim is one of the best free ones and EASY to use...I think the rose-colored glasses need to come off! At present, I still don't feel like I have a real grasp on the inner workings of KeePass! Two things I want to be able to do is, (1) - keep my list of something like 30 passwords secure on my computer (all PW's are on s USB flash drive), and (2) - be able to "lock", (i.e. password-protect), a significant number of files/folders on one particular USB flash drive (which contain sensitive information). The firewall I use has a file/folder locking capability. In fact, the whole USB flash drive itself can be completely locked and inaccessible unless I enter the complex password I use t... Read more

A:Value of password encryption program vs another method?

I know that I'm going against the grain on this one...but I see no need whatever for me to worry about password security...and I don't.

In the first place...anything requiringa a password which is on my systems...probably has additional mechanisms that must be used with the password (e.g., my bank) or isn't worth worrying about (passwords for downloads/programs...access to websites, etc., IMO.

I, in my simplicity, keep all passwords of any sort on a word/text document which is available on both of my systems.

I don't anticipate being hacked...there are no other users for my systems...I don't see the need for a lot of worry on my part and I keep it simple.

This may be a partial backlash to my being either a custodian or having access to TS documents within the Army, where I truly was concerned with security of materials...I can't say for sure but I know that I don't feel this is a matter of great importance for me.

Actually, I think that I stand a greater risk compromise by virtue of the institution being hacked...than if someone bothered with my system.

But...I'm a simple person, with simple interests, not an attractive target of any sort...for anyone wanting security data of any sort which might be deemed attractive. And I practice good-to-excellent system security...since the major threat for beign hacked will be malware. I'd rather stop them at the front door than worry about their ability to find the keys to the car .

Louis

Read other 2 answers
RELEVANCY SCORE 49.2

Hi folks,

I have win 7 ultimate 64bit and a while ago i tampered with file encryption and was dumb enough not to back up my encryption key. However, i remember my password that i used to encrypt those files. I formatted C: and re-installed Win7, just to notice i can't access some of my important files on another drive.

So, i thought several possibilities of recovery, and i appreciate if you guys could express if any of the options below are viable.

1) Since i didn't back up my encryption key, where is the original one located? (if i use some recovery program to restore it)

2) Can i use recovery programs to restore pre-format a) user account, or b) encryption key, or c) windows (which actually then works)?

3) I remember the password i used to encrypt the files, so can i just make a new encryption key and kind of import it to my present windows to decrypt those files?

4) Does "Advanced EFS Data Recovery" or some other encryption key recovery tool work for my problem?

Sorry for being a total noob and asking for help, but i really, really would appreciate any help i can get on this matter.

A:Lost encryption key, remember password

Your password has more to do with the encryption key used to decrypt the encryption key used on your files. I'm going to say recovering the necessary files for decryption is well out of reach at this point. And no, you cannot create a new user account with the same username and password, that information is only half of the story.

Without the backup encryption key that encrypted data is pretty much out of reach. And unless you got super luck the reinstallation didn't write over the previous user directory and its files...its slim very slim.

Read other 2 answers